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Quantum advantage is notoriously hard to find and even harder to prove. For 
example the class of functions computable with classical physics actually ex¬ 
actly coincides with the class computable quantum-mechanically. It is strongly 
believed, but not proven, that quantum computing provides exponential speed¬ 
up for a range of problems, such as factoring. Here we address a computa¬ 
tional scenario of “randomness processing” in which quantum theory prov- 
ably yields, not only resource reduction over classical stochastic physics, but a 
strictly larger class of problems which can be solved. Beyond new foundational 
insights into the nature and malleability of randomness, and the distinction 
between quantum and classical information, these results also offer the poten¬ 
tial of developing classically intractable simulations with currently accessible 
quantum technologies. 

Suppose you are handed a elassieal eoin with some unknown bias, is there a method by 
whieh one ean simulate a perfeetly fair eoin-flip? The folklore method (attributed to von- 
Neumann [1]) is as follows: Flip the eoin twiee, if the two outeomes are different then out¬ 
put the eoin with its value on the seeond flip, otherwise try again. Provided that the unknown 
probability of heads, p is not 0 or 1, it is elear that this method yields, with probability one, an 
unbiased output after a random number of eoin-flips. Contrast this with the ease where one is 
asked to output a new eoin that has probability of heads In this ease exaetly two flips suffiee 
for any p G [0,1]: we flip the biased coin twice and if both flips are heads then we output the 
new coin showing heads, otherwise we output it showing tails. 

These two examples tell us that the output bias functions f{p) := 1/2 and f{p) := p^ can 
both be “constructed” by flipping a coin with some unknown bias p. More generally, we say 
that a function / is constructibl^if there is an algorithm that yields an output with bias /(p), 

'in the mathematics literature the words observable and simulable are often used, however these already have 
unrelated but potentially confusing technical meaning within quantum theory. 
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almost surely after a finite number of coin-flips. Slightly more precisely: for all p the procedure 
to construct f{p) must define disjoint sets Si and S 2 whose elements are finite strings, such that 
with probability 1 the sequence of flips produced has exactly one of these strings as an initial 
segment. For any sequence of flips the output is heads if the initial segment is in Si and tails if 
it is in S 2 , and thus an output is produced almost surely in finite time. 

The topic of which functions are constructible, how easily they can be constructed, and their 
applications goes by the name “Bernoulli Factory” [2-5]. Crucially, in 1995 a theorem of Keane 
and O’Brien [2] determined the exact set of functions constructible from a classical coin of un¬ 
known bias p. Loosely speaking, it was found that a function f{p) : {S C [0,1]) —)■ [0,1] is 
constructible if and only if (a) it is continuous, (b) it does not touch 0 or 1 within its domain and 
(c) it does not approach zero or one exponentially quickly at any edge of its domain (see the 
supplementary materials for a precise statement). While this allows such surprising functions 
as it also rules out important ones such as as the “probability amplification” function 

f{p) = 2p, which is central to certain stochastic simulation protocols. Moreover, it says noth¬ 
ing about the resources required to actually construct the functions - often an infeasibly large 
number of coin-flips are required. 

The scenario described for the Bernoulli factory shares similarities to a Turing Machine, 
however it is worth emphasizing that there are differences between it and a fully universal 
scenario. While both possess a target function to be “computed”, the Bernoulli factory, with its 
unbounded, probabilistic i.i.d input, is in a sense a simpler, arguably more tractable, model. This 
makes the Bernoulli Factory an ideal candidate with which to establish quantum-mechanical 
results that are provably beyond the reach of classical physics. 

The central results we present in this work are: 

1. Quantum Bernoulli Factories allow the construction of a strictly larger class of functions 
than allowed in stochastic classical physics. 

2. Quantum Bernoulli Factories provide dramatic improvements in terms of resource re¬ 
quirements over a range of classically constructible functions. 

The classical Bernoulli Factory (CBF) can be easily described within a quantum-mechanical 
setting via (arbitrarily many) copies of a qubit prepared in the mixed qubit state 

p = p|0)(0|-l-(l-p)|l)(l|, (1) 

for unknown p G S' C [0,1]. Here the computational basis {|0), |1)} of the two-dimensional 
qubit Hilbert space "H, denotes a fiducial projective measurement that extracts classical data. 
In contrast, a quantum-mechanical extension of the classical coin states has coherences in this 
basis. Our goal is to contrast the fundamental processing of such classical randomness with the 
quantum randomness attainable in a quantum Bernoulli factory (QBF). It should be emphasised, 
however, that our desired output is still classical. We refer to the quantum-mechanical extension 
of the coin state as a quoin, and accordingly it is described by the coherent state 

b) = v^|0) + v^l -p|l)- (2) 
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For this we find measurement in the computational basis {10), 11)} returns the probability distri¬ 
bution {p, 1 — p), and so by restricting to stochastic mixing in this basis, together with algorith¬ 
mic processing, we see that the classical Bernoulli Factory setting is recovered as a special case 
from the quantum-mechanical one. In particular we see that the stochastic mixing available in 
the classical factory is a special case of the unitary operations available in the quantum setting 
We now demonstrate that the full set of quantum-mechanical operations allows a strictly 
larger class of functions than allowed classically. A crucial demonstration of the superior power 
of the quantum-mechanical Bernoulli Factory is given by the probability amplification function 
f{p) = 2p. This function is impossible to construct classically, since it attains the value f{p) = 
1 forp =1/2, and so traditional work-arounds involve “chopping” the function as it approaches 
p = 1/2, and forming a truncated function, /(p) = min(2p, 1 — e) for some fixed 0 < e < 
1. This approximate function then does satisfy the conditions of the Keane O’Brien theorem, 
however the amount of coins needed to produce such a function scale very poorly with e (see 
[6,7] for examples). In contrast we show that within a QBF it is possible to efficiently construct 
the classically impossible probability amplification function /a : [0,1] —)■ [0,1] defined by: 

2p ; p e [0, 

2(1-p) ; pe (1/2,1] ’ 

as shown in Fig{^ 

Our method is as follows. The target function admits an alternative representation of /a (p) = 
1 — — 4p(l — p), which in turn possesses an expansion of the form 





1 

{2k - l)22fc 


(4p(l - p))^ := gfc(4p(l - p))^ 

k=l 


( 3 ) 


where is a probability distribution. 

Since within the (classical or quantum) Bernoulli Factory we can generate any constant 
distribution, we first construct an integer output k with probability 


f2k\ 1 
\k ) {2k - 1)22^=’ 


( 4 ) 


and then conditioned on this output construct the function gk{p) = (4p(l — p)Y- The latter set 
of functions are classically inaccessible for all A: > 0. We also note that gk{p) = Pi (p) and 
so our task reduces to constructing the k = 1 case. 

This is easily achieved by considering a Bell-basis measurement 

{|.#.±) = (|00) ± |11»/V2, |^±> = (|01> ± |10))/y2}, (5) 

^One could consider convex combinations of unitaries, however this turns out to be equivalent, since it is always 
possible to simulate this stochasticity via unitary generation of randomness on a subset of quoins or ancillae qubits. 
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on two quoins. The probability that we obtain |'0+)('^+| or |0“)(0“| is 1/2, however the prob¬ 
ability of obtaining the outeome conditioned on obtaining or |0“)(0“| is 

exactly 4p(l — p) = gi{p). Putting everything together, to construct a /a(p) coin we output 
an index k with probability and then construct k gi(p)-coins using 0{k) quoins. If k out¬ 
comes of heads in a row are obtained from the (7i(p)-coins then heads is output, otherwise tails 
is output. This provides an exact construction of the function /a, as claimed. 

We can provide a clearer account of this construction by adapting a method in [8], where 
we can represent the above method as a random walk on a ladder [Figj^. One begins at the 
point marked “Start” and flips a gi(p)-coin to decide where to move next. Once on the ladder 
at any vertex we step up the ladder with probability gi{p)/2, or down the ladder with the same 
probability; otherwise we move across. If we reach the bottom left corner we output heads, 
while if we reach the bottom right corner we output tails; this means that if the very first flip is 
tails we output tails immediately. The probability of outputting heads can be shown to be 


F(heads) = gi{py — 

9i{P) 

= 1 - ^yi-gi{p) 

= 1 - ^/l-4p{l-p) = /a(p). 


( 6 ) 

( 7 ) 

( 8 ) 


The construction that we have provided uses two-qubit measurements in an entangled basis, 
and so one might think that entanglement is required for any quantum advantage, surprisingly 
this is not the case - the following theorems determine the exact class of functions / : [0,1] — 
[0,1] that are constructible within a QBF using only single-qubit operations, and are the main 
results of this work. In fact the only type of operations required for our proofs are the unitaries 


H(a) = 


a/ 1 — a y/a 


'a —a/1 — a 
which construct a coin that gives output one with probability 


( 9 ) 


K{p) = - a) - -P)) • (10) 

Theorem 1. A function f : [0,1] —)■ [0,1] is constructible with quoins and a finite set of single¬ 
qubit operations if and only if the following conditions hold. 


1. f is continuous. 

2. Both Z = {zi : f {zi) = 0} and W = {wi : f (te/ = 1} are finite sets. 

3. 'iz ^ Z there exists constants c, <5 > 0 and and integer k < oo such that 

c{p — zY^ < f {p) ^p ^[z — 5,z A S\. 
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4. 'iw G W there exists constants c, 5 > 0 and an integer k < oo such that 

1 — c{p — > f ip) yp ^ [w — 6,w + 6]. 

The proof of Theorem 1 is too long to inelude here and is provided in the supplementary 
materials. The main idea is similar to the eonstruetion of the probability amplifieation fune- 
tion, and involves arriving at a eonvex deeomposition in terms of funetions that are explieitly 
eonstruetible using quantum operations on quoins. It is elear that the eonditions of the theo¬ 
rem are a natural generalization of the elassieal ease, exeept now the funetion is allowed to go 
(polynomially quiekly) to 0 and 1 at a finite number points over the interval [0,1]. Moreover, 
this implies that the sealing of resourees within the interior no longer behaves as in the elassieal 
ease, where large number of eoins are required if the function approaches 0 or 1 at for example 
p = 1/2. Instead, the scaling for any point x G [0,1] behaves like the end-points p = 0,1. 

One straightforward generalization is that we do not require the target function be defined 
at all points inside the interval [0,1], and can allow more extreme behaviours (such as rapidly 
increasing oscillations or sharp discontinuities) in the functions that we construct. To this end 
we have the following theorem. 

Theorem 2 . A function f : (0, oi) U (oi, 02) U ... U (a„, 1) —)■ [0,1] is eonstruetible with quoins 
and a finite set of single qubit unitaries if f is continuous on its domain and there exists a finite 
list {oi, 02, ■■■an'}, which contains {oi, 02, ...a„}, and integer k such that 

a^(p) </(p) < 1 - a^(p) (11) 


for all p G (0,1), where 


a(p):=p(l-p) Yl haAp)i^ - Kip)) (12) 

l<i<n' 

The proof of Theorem [^follows a slightly different construction to Theorem and is also 
provided in the supplementary materials. The above two theorems both relate to single-qubit 
operations and provide a broad class of eonstruetible functions, however we conjecture that 
multi-qubit unitaries do not extend the set of quantumly eonstruetible functions, but do provide 
additional speed-ups, as is illustrated by the example of the function pi constructed from Bell 
measurements. 

It is important to note that in addition to extending the class of functions, the quantum- 
mechanical Bernoulli Factory provides dramatic speed-ups for certain functions that are clas¬ 
sically accessible. For example, consider the function /« : [0,1] —)■ [0,1], given by /^(p) = 
ahaip) with 0 < a < 1, which is easily constructed via a convex combination of ha (which 
requires just a single quoin) and the function 0. Since the function ha is inaccessible classically, 
the construction of the function /„ necessarily requires a rapidly increasing number of classical 
coins as a tends to 1, in stark contrast to the quantum-mechanical case. 
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Up to this point we have been concerned with constructing from a coherent input a target 
distribution f{p) as a classical probabilistic distribution, however a more sophisticated goal is 
to construct a coherent output from a coherent input. Specifically, given an unbounded number 
of input quoins \p) what output quoins \f{p)) can be obtained through arbitrary quantum oper¬ 
ations on the input string? This is related to exact sampling tasks of the following form: given 
a classical algorithm that can efficiently sample bit strings Xi with associated probabilities pi, 
does there exist an efficient quantum algorithm which outputs the state 

='^ Wi\xi)^ (13) 

k 

This problem has been called q-sampling [9,10] and q-samples constructible using the simple 
techniques of [9-11] form a useful starting point in many modern quantum algorithms [12-15] 
and enable q-sampling of various useful distributions [16-18]. It should be noted that the ques¬ 
tion of which efficient classical sampling algorithms allow for creation of an efficient q-sample 
is remarkably subtle. For instance, it is classically trivial to uniformly sample the n\ adjacency 
matrices corresponding to permutations of the vertex labellings of an n-vertex graph, such a 
q-sample would easily allow for an efficient quantum algorithm to solve graph isomorphism but 
despite attempts from many researchers no efficient procedure has been found. 

The distinguishing features of quantum and classical information are subtle, and often well- 
hidden. Paradigmatic examples have already appeared in single-party cryptography [19], two- 
party cryptography, and communication complexity [20]. Of arguably broader significance is to 
determine the computational abilities allowed by quantum physics. Quantum computing does 
not allow new functions to be constructed and the speed-ups, whilst strongly supported by evi¬ 
dence remain unproven. The work presented here provides a computational scenario in which 
quantum mechanics has strict superiority over classical physics and, by virtue of requiring only 
single-qubit manipulations, appears vastly easier to attain experimentally. 
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Supplementary Methods 

In order to prove our two theorems we will need to define certain sets and probability measures. 

We define as the set of all infinite sequences X = (Xi, X2, X3,...) such that Xi G {0,1}. 
A flip of “heads” corresponds to the value 1. 

We define cylinder sets V{vi, ...,Vk) = {X e : X^ = Vi,l < i < k} as the set of all 
infinite sequences beginning with the string (ni, ...,Vk). For example, V (101), is the set of all 
infinite {0,1} strings beginning with 101. The product topology on kl is defined by taking these 
cylinder sets as a basis for the open sets. 

A probability measure Pp takes an open subset of to the probability of it occurring. In the 
simplest case, that of classical coins with no processing, every value of p G [0,1], determines a 
probability measure Pp on kl such that Pp{Xi = 1) = p for every i. 

For any subset S' of we define the outer measure, required for when S is not open, as 

Pp{S) = mf{Pp{E) : E is open and S C E}, (14) 

An event is a subset of kl which is measurable with respect to Pp for every p. 

The only events we are interested in discussing are those for which we can say whether they 
occur after some finite number of coin flips. We call these events discernible with respect to 
a given probability distribution. An event is discernible if the probability that we need to flip 
infinitely many coins to decide whether it occurs is zero. More formally: 

Definition 1: An event S is discernible with respect to a probability measure Pp if Pp{S) + 
Pp{S^) = 1. This may be the case for some values of p and not others. 

Now in our quantum factory our ability to apply different unitaries to different coins means 
defining some new things. 

The total sample space is given by 

kltot = fil X X ... X (15) 

is the set of all ordered n-tuples of infinite {0,1} strings. 

Subsets are then products of cylinder sets. 

Vtot = V{vfi X V{v^) X ... X V{vJ (16) 

is the set of all ordered n-tuples of infinite (0,1} strings which begin with the finite strings 
Ti; T2) •••) Tn respectively. Again illustrating with an example, the set 1^(1) x 1^(01) x V (111) 
is the set of all ordered 3-tuples of infinite {0,1} strings which begin with 1, 01 and 111 respec¬ 
tively. 

We also have different probability distributions in the quantum cases, defined by a value p 
and finite set of unitary matrices. These unitaries describe the algorithmic freedom we have to 
process the unknown quantum state, and are determined by the target function /(p). For each 
kli we associate a unitary Ui of the form 
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(17) 


U, = H{ai) 


Vi 


-Vi 


which yields a coin that gives output one with probability 




ha{p) = (a/p(1 - a) - A/a(l -p)j (18) 

when measured in the computational basis. 

We call the set of unitaries G = {Ui} and so the quantum probability distribution is a 
function of both p and G. 


P, 


P,G 


/ 

G 

\ 

G 

ki 

] 

n 

■ Vivf) = ■ 

n 

[n 



1 / i 


II 


(19) 


We are interested in functions where we can construct sets and probability measures such 
that there is an event that occurs with probability f{p) and is discernible. 

Definition 2: A function / : [0,1] —)■ [0,1] is q-constructible if there exists an event S and a 
probability measure such that S is discernible with respect to Pp^c und Pp^ciS) = fip) 

The following definitions will be used for Theorem 1. 

Definition 3: A function f(p) : [0,1] —)■ [0,1] is simple and poly-bounded (SPB) iff it 
satisfies 


1 . / is continuous. 

2. Both Z = {zi : f (zi) = 0} and W = {wi : f (wi) = 1} are finite sets. 

3. \/z e Z there exists constants c, 5 > 0 and and integer k < oo such that 

c{p — zY^ < f {p) ^p ^[z — 5,z + 5\. 


4. Vte e W there exists constants c, 5 > 0 and an integer k < oo such that 

I — c{p — > f (p) Wp e [w — 5,w + 5]. 


Definition 4: A function L : [0,1] —)■ [0,1] is a lower bounding function for a function 
/: [0,1] ^[0,1] if 

L{p) < fip) forp e [0,1]. (20) 

A function U : [0,1] —)■ [0,1] is an upper bounding function for a function / : [0,1] —)■ [0,1] if 

f^(p) >/(p) forp e [0,1]. (21) 

We will need some more definitions for Theorem 2. 
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Definition 5: A function / : [0,1] —)■ [0,1] is finitely q-constructible if it is q-constructible 
and there exists some N such that after observing the first N bits of the string one can say with 
certainty whether the output will be 0 or 1. 

Definition 6: A function a : —)■ N is discernible, if a~^{n) is discernible for every n 

We now prove Proposition 1, which is the main result needed to adapt the classical result to 
the quantum case. 

Proposition 1: For any SPB function f{p) there exists a q-constructible pair of bounding 
functions L{p) and U(p) such that 

L{p) <f{p)<U (p) 


where 


max (f/ (p) - L (p)) < -. 
pe[o,i] / 


These two conditions ensure that 


9{p) 


Hp) 

1-U{p) + L{p) 


( 22 ) 


will be a good approximation to /(p), which will be an important step later on. 

We will outline an explicit construction of these bounding functions, which are key to The¬ 
orem 1. 

Consider some candidates for L{p), U{p) which do not quite work, namely An{p), Bn{p) 
defined by 


A.W - g/(0 (:)/(!-pr‘ 

- i:(3A/(^))(:)/a-pr‘ 

These bounding functions have a minimum separation of one third rather than one half. This 
is because some of the modifications we will use will slightly increase this value, meaning we 
require an initial buffer. 

From Bernstein’s proof of Weierstrass’ approximation theorem[2] we know that A„(p), Bn{p) 
converge uniformly in n to |/(p) ,(| + §/ (p)) , and so would be good bounding functions had 
we the freedom to take n to infinity. They are also manifestly constructible (within even a 
classical Bernoulli factory). However in the vicinity of the zeros and ones of /(p) we have a 
problem, as easily illustrated with the example[SupFig.l]. 

The strategy for dealing with this will be to multiply A„(p) by a generalized Heaviside-type 
function (that must itself be q-constructible). We focus on L (p) whenever it is obvious how to 
define the corresponding procedure for U (p). Defining 

ha{p) = (a/p( 1 - a) - A/a(l -p)j (23) 
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consider the funetion 


( p ) := (1 - (1 - K {V)r)'^ 

whieh is plotted here for M = 3,2: = l/2 and m = 400,[SupFig.2]: 

Note that Tm,M,z (z) = 0 and that Tm,M,z (p) is eonstruetible with a finite number of quoins, 
sinee hz (p) is eonstruetible with a single quoin upon whieh the unitary transformation 


\/\ — Z a /^ 

— \fz \/\ — z 


(24) 


is performed prior to a eomputational basis measurement. Bernoulli’s inequality[3] (1 + a;)” > 
1 + nx ean be used to show that 

lim Tm,M,z {p) = 0 if hz {p) < 1/M 

m^oo 

= l if hz {p) > 1/M 

We ean use sueh funetions to modify Anfp), to try and foree it to always be a lower bound 
for f{p). For the same example eonsider now the produet ^ioo(p)^ 40 o, 5 ,i/ 2 (p)^ 40 o,i, 3 / 4 (p): 

There are a eouple of issues we need to be eareful about [SupFig.3]: 

Issue 1. When we “push down” An (p) we inerease its distanee from Bn (p) , whieh itself is 
going to be “pushed up” at other (possibly nearby) loeations. So we run the risk of inereasing 
the distanee between the lower- and upper-bounding funetions to more than 1/2. You ean see 
A{p) being flattened too mueh around p = 0.5 

Issue 2. We want the generalized Heaviside funetion to go towards zero over a finite width 
interval around 2 : that is not too narrow - it must inelude all the problematie points at whieh 
An{p) beeomes larger than /(p). You ean see this happening around p = 0.75. When this 
happens we ean either inerease the interval width or alternatively inerease n so that the points 
where An{p) erosses / (p) “slide” inwards. 

Sinee hz (z) = 0 and hz (p) is eonvex we readily see that, denoting by /ij the two solutions 
to hz (p) = 1/M, any large integer M defines a finite interval /(M, z) := [pi, P 2 ] that (strietly) 
eontains the point 2 :. The interval width deereases as M is inereased, but is finite for all M < 00. 
Inside/outside /(M, z) standard theorems for eontinuous funetions ensure that the eonvergenee 
(in m) to 0 or 1 respeetively is uniform. 

A series expansion 


Tm,M,z (p) ~ 


(M(p — zY)^ 
Az{l-z) 


+ 0((p 



around the point p = z makes elear the reason for the eonditions 3 and 4 in Definition 1 - 
for funetions that rise exponentially slowly from any zero 2 : we would not be able to ehoose 
parameters M and m sueh that we ean push (p) below / (p) in the vieinity of 2 :. 
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We now have all ingredients in place to outline a procedure for constructing our lower- 
bounding function, which will take the form 

L (p) = An (p) Yl (p) 

i\zi^Z 


for some appropriate choice of parameters n, mi,Mi. For each zero Zi ^ Z first choose large 
integers Mj such that we fix non-overlapping intervals / (Mj, Zi) which are smaller than those 
determined by the associated 5 (see Definition 1) for that Zi. We ensure they also do not overlap 
with the similar intervals / (Mj, Wi) used in the construction of U (p). However these intervals 
remain finite so that as n is increased, uniform convergence ensures that all the problematic 
points where An (p) > / (p) end up strictly contained within the I {Mi, Zi), so L{p) < f{p). 

Finally, and critically, we also ensure that 


sup 





Vf 


This is possible, because / is continuous and the interval contains a zero of / so for sufficiently 
large n there will be an interval containing for which U{p) < 1/2. The importance of this 
condition is that now, even as our lower bounding function is taken close to 0 within the intervals 
I {Mi,Zi) , our upper-bounding function (which converges uniformly to (| + §/ (p)) within 
/ (Mj, Zi)) can be brought within a distance 1/2 from the lower bounding function. 

In summary, we now have that L (p) converges uniformly on [0,1] — UjJ (Mj, Zi) to |/ (p) 
and on UjJ (Mj, Zi) to 0 as the remaining free parameters n, rrij are increased. Similarly we 
construct 

U (p) = Bn (p) JJ (P) + 1 - n (P) 

i\wi(i:W i|uiigW 

which converges uniformly on [0,1] — UjJ (Mj, Wi) to | -f |/ (p) and on UjJ (Mj, Wi) to 1. The 
conditions of Proposition 1 can clearly be met with some suitable large (but finite) choice of the 
remaining free parameters. 

Theorem 1: A function / : [0,1] —)■ [0,1] is constructible with quoins and a finite set of 
single qubit unitaries if and only if it is SPB. 

The proof of this theorem essentially follows that of Keane and 0’Brien[l]. 

Proof. Let (p) and Uk (p) denote lower and upper-bounding functions satisfying Proposition 
1, for the sequence of SPB functions fk (p) , where 


fi (P) 
9k (p) 

fk+i{p) 


f ip) 

Lk (p) 

^-Uk (p) + Lk ip) 
4 / 1 

3 (/fc (P) - -^9k ip) 
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Since U{p) and L{p) are finitely q-simulable there exists some N after whieh we ean say 
with eertainty whether they occur or not. If neither oceur, the output is heads; if both oeeur, the 
output is tails; if only L{p) occurs, simulate the funetions again. 

This proeedure produces an output with probability (1 — f/(p) + L(p)) on eaeh trial and so 
the probabilty of this outputting heads is 


Similarly 


9iip) = j- 

> ^(Mp) 

> ^(Mp) 

> Imp) 


Hp) 

U{p) + L{p) 

1 m 

4'1 - U{p) + L{p) 

l-m) 

fajp) ^ 

O ) 


fi+l{p) = 


1 - fi+l{p) = 


< 


^(1-(!-/.(?)) 
^((1 - / i ( p )) - ^ 

1(1-Mp)) 


11 1 - U{p) 

~ 4 ^ 4‘1 - U{p) + L{p) 
1 - U{P) . 
■l-U{p) + L{p)’ 


So if fi{p) is SPB then so is /j+i(p). 

Sinee 

/o\ Af-l 

= (i) * ° 

we have that / (p) can be eonvexly deeomposed 


lim 

N^oo 


N 


fip)-Yl 


k=0 


k-1 


\9k (p) 



(25) 

(26) 

(27) 

(28) 
(29) 


(30) 

(31) 

(32) 


Using ancillary randomness to sample an index k with probability (|)^ ^ I we then eonstruct 
a Qk (p) eoin and we have shown that any SPB function can be eonstructed. 

To show that any funetion eonstruetible with quoins and a finite number of unitaries must 
be SPB is far simpler. 
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With the exception of the trivial functions f{p) = 0,1, if a function is constructible then 
there is some number of flips k such that after k flips the probability of outputting 0 and the 
probability of outputting 1 are both greater than zero. 

The probability of outputting 1 must be less than /(p) but be at least some constant multi¬ 
plied by the least probable string which in turn must be greater than the expression below. 

n 

P(output 1 l/c flips) > e JJ(|(0|[/i|p)(l|f/i|p)|)^''> e JJ (p - (33) 

*=1 i\zi£Z 

This yields condition three of Definition 3 and half of condition two. Repeating the process 
with output one yields condition four and the other half of condition two. Finally we recall that 
a sum of continuous functions is a continuous function and since the probability measure on 
open sets give continuous functions and the event is made up of such sets the probability of the 
event must e a continuous function. Thus we have shown any function constructible with quoins 
and a finite number of unitaries must be SPB and we have completed the proof of Theorem 1. 

□ 

For the classical Bernoulli factory there are two different approachs which yield the same 
result. When we applied both approaches to the quantum cases we found that they led us in 
different directions. When emulating the approach due to Keane and O’Brien proof of the first 
theorem arose naturally, however when we tried to prove the first theorem with the approach 
due to Wastlund various complications arose. This led to us proving Theorem 2 instead. 

Theorem 2: A function / ; (0, Oi) U (oi, 02 ) U ... U (a„, 1) —)■ [0,1] is constructible with 
quoins and a finite set of single qubit unitaries if / is continuous on its domain and there exists 
a finite list {ai, 02 , ■■■an'}, which contains {oi, 02 , ■■■an}, and integer k such that 

a^{p) < /(p) < 1 - a^(p) (34) 


for all p G (0,1), where 


a(p):=p(l-p) Yl - haAp)) (35) 

This second theorem gives stranger functions than the first. At the set of excluded points 
{ai} the function can undergo a discontinuity or even have no definite value. Were the func¬ 
tions extended over the whole interval (0,1) we would find we only require that the functions be 
piecewise continuous. The list {oi, 02, ...a„/} contains all the points at which /(p) is not defined 
and any points within the domain where /(p) takes the value zero or one. We prove Theorem 2 
by showing that we can pinpoint p to within an interval with high confidence and then approx¬ 
imate /(p); by averaging over many such approximations we achieve an exact sample. There 
are obvious parallels with promise problems. 

The proof can be summarised as follows: 
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• It is shown in proposition 2 that one can guess which of a set of intervals p lies in with a 
small error which depends on p. 

• It is shown in proposition 3 that we can choose our intervals such that there is a value qi 
which differs from the possible values of f{p) in the interval by some small error which 
depends on p. 

• It is shown in proposition 3 that these two results lead to an approximation of f{p) which 
differs from the true function by a small error which depends on p 

• As with Theorem 1, it is shown that if we can create good approximations we can create 
a sampling algorithm. 

Proposition 2: If (0, Oi) U (oi, 02 ) U ... U (a„, 1) is covered by countably many open subin¬ 
tervals Wi, i G N, and /c is a positive integer, then there is an discernible function a : —)■ N 

such that for every p G (0,1), 

Pp{a-\f.piWi])<a\p) (36) 

Proposition 2 states that given a set of intervals covering the domain of the function we can 
pinpoint p to within one of them after a finite number of tosses with the probability that our 
guess is incorrect being less than a^{p). This is an essential step in our proof. 

Proof 

In order to guess which interval we are in we must narrow down a potentially infinite number 
of intervals to a finite number. To this end we wish to restrict ourselves to a union of closed 
intervals so that we can invoke compactness. 

For each a G {ai, 02 , ...an} we flip /iai(p)-coins until we have observed nk + 2k + 1 tails. 
In addition we flip p-coins until we have observed nk + 2k + l tails and nk + 2k + l heads. For 
each case we call the number of flips before we see the required results rria., tuq for p-coins, 
and we call the maximum value rumax- 

Now for some a* the probability of the required results occurring after ma^ is. 

P(> {nk + 2k + l) tails in flips) < (1 - (37) 

We can use this to rule out a region around of size 2e as follows. 


P{> {nk + 2k + 1) tails in flips|p G {oj 


e,a, + e}) <2”^“*(l-h,,(p))2-"+2fc+i 

< (1 - /ia,(p))2""+2'= 

^ ^2nk+2k 

< a\p) 


(38) 

(39) 

(40) 

(41) 
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The same procedure can also show the probability that p e (0, e] or p e [1 — e, 1) is also 
below a^(p). This means we can say thatp e [e, Oi — e] U [oi + e, 02 —e] U...U [a„ + e, 1 —e] with 
probability greater than 1 — (p). It is possible for some of these regions to be large enough 

that they merge; this is not a problem. 

Now that we are restricted to a union of closed intervals we can, by compactness, choose 
a finite number of ITj’s which cover this set. We can also find 5 > 0 such that a^(p) > 5 
throughout this region. From the finite open cover we can choose a closed interval Fi C Wi for 
each i such that the {F^} cover our union of closed intervals. Now we estimate p by flipping 
classical coins and calculating the frequency of heads, our estimated value is 


In 


X, + ... + Xn 
N 


We do this with N flips, N being chosen such that 


(42) 


P{fNeF,\p^W,)<S (43) 

We now define our discernible function a as a (/tv G Fi) = i. Recall that the {Fi} are 
conditioned on rrimax so the function is not as simple as it appears. 

We have now shown that such a discernible function exists. 

□ 

Proposition 3: If f is any continuous function (0, Oi) U (oi, 02 )... U (a„, 1) —)■ (0,1), and 1 
is any positive integer, then there is a function g representing the probability of an discernible 
event such that for every p in (0, oi) U (ai, 02 )... U (a^, 1), 

\f{p)-9{p)\<a\p) (44) 

Proposition 3 uses Proposition 2 to show that we can find contructible functions which are 
good approximations to /(p) which allows us to complete our proof of Theorem 2 in a manner 
similar to that for Theorem 1; we sample a randomly from a set of approximations to /(p) in 
such a way that on average we sample /(p). 

Proof 

Since / is continuous, we can choose countably many subintervals Wi,W 2 ,W 3 ,... covering 
(0, Oi) U (oi, 02 )... U (a„, 1), and numbers gi, ^ 2 , Qs, ■■■ so that for every p e Wi 


\fip) - Qil < a^^^ip)- (45) 

We have shown in Proposition 2 that we can guess the interval with some small error prob¬ 
ability. The above statements show that we can choose our intervals such that they have the 
q values we need. The idea is that we guess our interval, Wi, and that we have chosen our 
intervals such that /(p) can be approximated as g* within them. 

In the event that / takes the value zero or one at a point within its domain then we assign a 
function gj(p) to an interval containing that point such that for every p G W/ 
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\f{p) - qi{p)\ < (46) 

using the techniques from Theorem 1. For ease of notation we will continue the proof assuming 
this is not necessary 

By Proposition 2, there is an discernible function a : 12 —)■ N such that for every p, 

Pp{a-\n-.p^Wn})<a^+\p) (47) 

Once a is known, which we know will be in finite time, we then use an event which occurs 
with probability 

Thus the total event has probability 

OO 

dip) = ^p(«“^(*))7* (48) 

i=l 

Hence for every p, the error \f{p) — g{p) \ is bounded by 

Ppip i Ua) + sup{|/(p) - qi\:pe Wi} = 2a'+^(p), (49) 

the chance of guessing the wrong interval plus the difference between and f{p). 
Recalling that 

a{p):=p{l-p) JJ ha^{p){l - ha,ip)) < Pi^ - P) < (50) 

l<i<n' 

and therefore 

Pp{p 4- Wa) + sup{|/(p) - qi\:pe Ui} = 2a'+^(p) < a\p). (51) 

So we have shown the total error is less than the error we are allowed. □ 

We can now complete the proof Theorem 2 by showing that this ability to create approxi¬ 
mations allows us to create an algorithm made from successive approximations. 

Proof 

Let / : (0, Oi) U (oi, 02 ) U ... U (a„, 1) —)■ [0, 1] be any continuous function satisfying 

a’" ip) < /(p) < 1 - a’'ip) (52) 

for some k. If we apply Proposition 3 to / with / = /c + 1 we find that there exists a function 
/i, representing the probability of an discernible event, such that, for every p. 


We then have 


1/1 (p) - fip)\< 

(53) 

hip) > f ip)- 

(54) 
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Since f{p)<l — a^{p), we see that 

flip) > 2/(p) - - 1 + a^(p) > 2f{p) - 1 + a^^^ip). 


(55) 


Similarly, 

flip) < fip) + (56) 

Since fip) > of ip), we see that 

flip) < 2/(p) + a’^^^ip) - a^ip) < 2f{p) - a^^^ip). (57) 

Combining these gives 

2/(p) - a^^\p) < fip) < 2f{p) - 1 + a^+\p) (58) 

which can be rearranged as 

a^+\p) < 2f{p) - fifp) <1- a^+^(p). (59) 

If we repeat this argument, replacing f{p) by 2f{p) — flip) and /c by /c + 1, we find that 
these exists a function /2 which is the probability of an discernible event. 

a^+^(p) < 4/(p) - 2flip) - /2(p) < 1 - a^^^ip) (60) 

Continuing in this way we can find functions fi, f 2 , f 3 , ■■■ each representing the probability 
of an discernible event, such that for every n, 

^ 2”/(p) - 2”-‘/,(p) - ... - Up) < 1 - a‘+”(p) (61) 

If we replace the lower and upper bounds by 0 and 1 and divide by 2"^ we get 

fip)-\flip)- ■■■- ^fnip) < ^) (62) 

Letting n —)■ cx), we obtain 

00 - 

fip) = Yl 

n=l 

So if we choose a value n with probability Pn = ^ and then sample fnip) we have sampled 
fip) exactly. 

To show that any function constructible with quoins and a finite number of unitaries must 
obey the conditions of Theorem 2 is far simpler. 

With the exception of the trivial functions fip) = 0,1, if a function is constructible then 
there is some number of flips k such that after k flips the probability of outputting 0 and the 
probability of outputting 1 are both greater than zero. 
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The probability of outputting 1 must be less than /(p) but be at least some constant multi¬ 
plied by the least probable string which in turn must be greater than the expression below. 

n 

P(outputl I/c flips) > eY\_i\{0\Ui\p){l\Ui\p)\)*’' > a^{p) (64) 

i=l 

The least probable string after k flips occurs with probability mina,(l — hai{p)Y 

\mnaXl - haXp)f > - p) n =«^(p) (65) 

V l<2<n^ / 

Repeating the process with output zero and combining the two yields. 

a^(p) < /(p) < 1 - a^(p), (66) 

as required. 

Finally we recall that a sum of continuous functions is a continuous function and since 
the probability measure on open sets give continuous functions and the event is made up of 
such sets the probability of the event must be a continuous function. It should be emphasised 
that although the extensions of many of these functions are piecewise continuous the functions 
themselves are always continuous on their domain. This completes the proof of Theorem 2. □ 
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Figure 1: The probability amplifieation funetion : [0,1] —>■ [0,1], and the first 35 funetions 
in the eonvex deeomposition Q. This funetion is impossible to eonstruet olassieally, but ean 
be aehieved quantum-meehanieally via two-qubit measurements in the entangled Bell-basis, 
together with elassieal proeessing. 



Figure 2: The quantum probability amplifieation eonstruetion ean be represented via a random 
walk on a semi-infinite ladder with transitions given by Bell-measurement outeomes on two 
qubits. 
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Figure 3: One example of the unusual funetions one eould eonstruet using Theorem 2, the 
aetual diseontinuities are exeluded. Effeetively we gain aeeess to pieeewise eontinuous fune- 
tions but with their diseontinuous points exeluded, leaving a function which is continuous on 
its domain. 



Supplementary Figure 1: Unsuccessful Bounding Functions We attempt to bound the 
function from above and below. Here we show 74ioo(p) and i?ioo(p), and their counterparts for 
very large n, for the piecewise linear function depicted. Note that both fail to be good 
bounding functions when /(p) gets close to zero or one. 
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T(p) 



Supplementary Figure 2: Our q-constructible “Heaviside” function Here we show an 
example of an important function for this task, which approaches zero rapidly close to the 

chosen point. This function is T 4 oo, 3 ,o .5 


f(p) 



Supplementary Figure 3: Further Difficulties with Bounding Functions The product 

function Aioo(p)T4oo,5,i/2(p)74oo,i,3/4(p) is nearly a good lower bounding function for f{p). It 
struggles at 0.5 from being pushed too flat and at 0.75 from not being flat enough. 
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